CVE-2006-6136 IBM WebSphere Application Server 6.1.0 before Fix Pack 3 (6.1.0.3) does not perform EAL4 authentication checks at the proper time during "registering of response operation," which has unknown impact a...
HighCVSS 10.0
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
IBM WebSphere Application Server 6.1.0 before Fix Pack 3 (6.1.0.3) does not perform EAL4 authentication checks at the proper time during "registering of response operation," which has unknown impact and attack vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm websphere application server | = 6.1.0 | No fix listed |
References
- 23028 third-party-advisory
- www-1.ibm.com
- www-1.ibm.com patch
- PK29847 patch vendor-advisory
- 21204 vdb-entry
- ADV-2006-4639 vdb-entry